Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ICg7FImXzFYQEgtMRga6cuXa758.cer
File: ICg7FImXzFYQEgtMRga6cuXa758.cer (raw, json)
Hash identifier: TLuCP9LXWW3b+hmjlCKeGnK+p2sdiOdzCDo9e/puHvE=
Subject key identifier: 20:28:3B:14:89:97:CC:56:10:12:0B:4C:46:06:BA:72:E5:DA:EF:9F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FA946F30ED08D74B5EF178A86918CA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0a/aa270a-c089-4778-9343-b7362edbd8ac/1/ICg7FImXzFYQEgtMRga6cuXa758.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0a/aa270a-c089-4778-9343-b7362edbd8ac/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:41:43 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 57624
AS: 197560
AS: 206689 -- 206690
AS: 206733
AS: 206934
AS: 212791
AS: 213272
IP: 46.235.32.0/21
IP: 185.63.220.0/22
IP: 185.96.244.0/22
IP: 185.212.80.0/22
IP: 193.30.22.0/23
IP: 193.30.90.0/23
IP: 194.5.44.0/22
IP: 2a04:f640::/29
IP: 2a0d:e100::/29
IP: 2a0f:a980::/29
IP: 2a0f:bd40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 Jul 2026 20:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fa:94:6f:30:ed:08:d7:4b:5e:f1:78:a8:69:18:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:41:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=20283b148997cc5610120b4c4606ba72e5daef9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:17:7d:35:ad:13:6a:91:6d:e5:5e:43:6e:93:
d1:e1:cf:2a:f1:f8:86:95:08:31:e1:ee:9f:b8:b1:
1f:96:9b:d4:63:87:8d:ad:15:b3:33:aa:34:15:54:
da:07:1f:7a:c1:4e:ae:c5:8c:e0:67:b3:fa:02:d5:
dd:64:24:5a:8d:76:13:48:e4:7a:02:3b:4d:c6:ed:
5f:5f:87:85:56:c6:e1:01:26:bf:6c:71:61:ac:29:
bc:a2:8b:53:75:e2:7e:19:11:9b:8a:fe:17:1c:f0:
26:26:cd:32:2d:a3:22:c4:b2:4c:4f:b3:6e:62:cf:
1b:f1:d5:18:59:c1:1e:d2:1e:3a:87:17:4b:8e:7c:
b6:eb:22:25:8f:19:87:ff:82:fe:e3:3a:40:cd:db:
ec:28:f0:22:91:59:7e:91:49:14:42:26:11:7b:c5:
a2:d4:e3:47:68:22:fc:5f:43:b6:dd:c0:14:c7:4d:
20:32:84:5b:2e:bf:07:70:6d:76:60:88:7b:7f:b1:
13:9e:76:d1:93:a0:9c:3b:cf:7c:9f:dc:f8:7c:e4:
1f:d5:a0:72:68:93:ce:07:8f:3a:0d:f2:07:c3:7d:
fe:34:96:dc:77:19:1b:c5:2d:e4:ac:bc:5e:b0:52:
85:b0:a6:1b:a7:dc:b8:06:ed:c0:91:6e:06:77:82:
97:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:28:3B:14:89:97:CC:56:10:12:0B:4C:46:06:BA:72:E5:DA:EF:9F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/aa270a-c089-4778-9343-b7362edbd8ac/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/aa270a-c089-4778-9343-b7362edbd8ac/1/ICg7FImXzFYQEgtMRga6cuXa758.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.235.32.0/21
185.63.220.0/22
185.96.244.0/22
185.212.80.0/22
193.30.22.0/23
193.30.90.0/23
194.5.44.0/22
IPv6:
2a04:f640::/29
2a0d:e100::/29
2a0f:a980::/29
2a0f:bd40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
57624
197560
206689-206690
206733
206934
212791
213272
Signature Algorithm: sha256WithRSAEncryption
13:d9:14:8c:e3:ec:09:99:14:ba:32:2b:e4:8a:ba:a3:55:67:
f9:80:cf:16:2d:e4:ca:38:b6:60:f7:c5:0f:b4:4b:92:fa:25:
d3:54:5f:4d:91:26:85:f8:79:cd:fe:e1:91:e9:af:54:4b:ee:
08:35:6f:53:df:5e:40:39:3c:49:25:a8:30:cd:0a:cc:63:0e:
76:79:8a:ad:dc:b6:d9:d8:5d:a7:9c:a7:89:eb:02:0a:d3:5f:
9c:db:b4:eb:af:35:67:c3:72:72:85:b0:ae:94:ac:3e:bd:47:
d9:d3:73:1c:35:38:d5:c8:9f:d1:43:32:d1:b3:cf:67:cd:08:
be:73:21:56:ca:a6:64:8f:55:26:20:64:71:7b:a8:63:70:67:
10:4e:ff:f8:e5:93:ce:84:e0:d2:09:90:46:b0:37:cf:ca:85:
7d:1a:0e:49:d7:08:96:3d:67:ad:10:32:9a:c8:2e:77:a6:38:
d0:21:34:24:b8:ef:5b:08:72:4b:0b:63:ef:8c:a6:e4:dd:f2:
c2:3d:5a:4e:1e:dd:49:e6:82:e4:02:71:a2:9d:f9:7a:8c:aa:
1a:34:79:8b:e8:bb:c5:78:69:30:20:fe:bd:63:bb:0b:03:13:
62:cc:60:21:62:e9:58:31:66:34:36:c3:11:e4:4d:26:9e:a5:
30:05:a9:45
-----BEGIN CERTIFICATE-----
MIIGATCCBOmgAwIBAgISAZ8Y+pRvMO0I10te8XioaRjKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwNjMwMTQ0MTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMDI4M2IxNDg5OTdjYzU2MTAxMjBiNGM0NjA2YmE3MmU1ZGFlZjlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5hd9Na0TapFt5V5DbpPR4c8q8fiG
lQgx4e6fuLEflpvUY4eNrRWzM6o0FVTaBx96wU6uxYzgZ7P6AtXdZCRajXYTSOR6
AjtNxu1fX4eFVsbhASa/bHFhrCm8ootTdeJ+GRGbiv4XHPAmJs0yLaMixLJMT7Nu
Ys8b8dUYWcEe0h46hxdLjny26yIljxmH/4L+4zpAzdvsKPAikVl+kUkUQiYRe8Wi
1ONHaCL8X0O23cAUx00gMoRbLr8HcG12YIh7f7ETnnbRk6CcO898n9z4fOQf1aBy
aJPOB486DfIHw33+NJbcdxkbxS3krLxesFKFsKYbp9y4Bu3AkW4Gd4KXqQIDAQAB
o4IDDTCCAwkwHQYDVR0OBBYEFCAoOxSJl8xWEBILTEYGunLl2u+fMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBhL2FhMjcw
YS1jMDg5LTQ3NzgtOTM0My1iNzM2MmVkYmQ4YWMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGEvYWEyNzBh
LWMwODktNDc3OC05MzQzLWI3MzYyZWRiZDhhYy8xL0lDZzdGSW1YekZZUUVndE1S
Z2E2Y3VYYTc1OC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGCCsGAQUF
BwEHAQH/BFgwVjAwBAIAATAqAwQDLusgAwQCuT/cAwQCuWD0AwQCudRQAwQBwR4W
AwQBwR5aAwQCwgUsMCIEAgACMBwDBQMqBPZAAwUDKg3hAAMFAyoPqYADBQMqD71A
MD8GCCsGAQUFBwEIAQH/BDAwLqAsMCoCAwDhGAIDAwO4MAoCAwMnYQIDAydiAgMD
J40CAwMoVgIDAz83AgMDQRgwDQYJKoZIhvcNAQELBQADggEBABPZFIzj7AmZFLoy
K+SKuqNVZ/mAzxYt5Mo4tmD3xQ+0S5L6JdNUX02RJoX4ec3+4ZHpr1RL7gg1b1Pf
XkA5PEklqDDNCsxjDnZ5iq3cttnYXaecp4nrAgrTX5zbtOuvNWfDcnKFsK6UrD69
R9nTcxw1ONXIn9FDMtGzz2fNCL5zIVbKpmSPVSYgZHF7qGNwZxBO//jlk86E4NIJ
kEawN8/KhX0aDknXCJY9Z60QMprILnemONAhNCS471sIcksLY++MpuTd8sI9Wk4e
3UnmguQCcaKd+XqMqho0eYvou8V4aTAg/r1juwsDE2LMYCFi6VgxZjQ2wxHkTSae
pTAFqUU=
-----END CERTIFICATE-----
Generated at Fri Jul 10 04:12:54 2026 by rpki-client